The LDAP Provisioner Plugin should support configuring how the DN is constructed, specifically the attributes prepended to the base DN. Currently, this is uid=%d (co_people:id), but could reasonably be anything from the identifiers table, and need not be uid.